CVE-2026-75126 PLANET GS-4210-16P2S Stack Buffer Overflow via dispatcher.cgi Standard Handlers

PLANET GS-4210-16P2S firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The following handlers copy attacker-controlled POST parameters into fixed-size stack buffers without length validation:...

CVE-2026-75126

PLANET GS-4210-16P2S firmware prior to 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi . Numerous standard handlers (covering VLAN, PoE, SNMPv3, ACL, STP, TAC+, DHCP, and other functions) copy attacker-controlled POST parameters into f...

EUVD-2026-67786

PLANET GS-4210-16P2S firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The following handlers copy attacker-controlled POST parameters into fixed-size stack buffers without length validation:...

EUVD-2026-67784

PLANET GS-4210-16P2S firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, allowing parsequerystring to process...

CVE-2026-75124 PLANET GS-4210-16P2S Memory Corruption via dispatcher.cgi _readHttpParam

PLANET GS-4210-16P2S firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, allowing parsequerystring to process...

CVE-2026-75124

PLANET GS-4210-16P2S firmware prior to 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface. The root cause is in the _readHttpParam function, which copies an oversized HTTP query string without guaranteeing NUL termination, allowing parse_que...

cve-2025-29384-poc

CVE-2025-29384 Proof-of-Concept Exploit Überblick Dieses Repository enthält einen erweiterten Proof-of-Concept PoC-Exploit für CVE-2025-29384 , eine kritische stapelbasierte Pufferüberlauf -Schwachstelle, die im Tenda AC9 Router mit der Firmware-Version V15.03.05.14multi entdeckt wurde. Diese...

CVE-2025-2620-poc

Exploit Proof-of-Concept per CVE-2025-2620 Panoramica Questa repository contiene un exploit proof-of-concept PoC avanzato per CVE-2025-2620 , una vulnerabilità critica di buffer overflow basato su stack scoperta nel router D-Link DAP-1620 con versione firmware 1.03. Questa vulnerabilità consente ...

CVE-2022-30040

ثغرة رفض الخدمة في Tenda AX1803 v1.0.0.12890 نظرة عامة معلومات موقع الشركة المصنعة: https://www.tenda.com.cn/profile/contact.html عنوان تحميل البرنامج الثابت: https://www.tenda.com.cn/download/default.html وصف الثغرة تقع الثغرة في نظام الملفات rootfsubifs، وتحديدًا في /goform/SetSysTimeCfg داخل...

cve-2019-1663

🚀 Exploração do CVE-2019-1663 🧩 Introdução Este repositório documenta a exploração do CVE-2019-1663, uma vulnerabilidade crítica de execução remota de código RCE que afeta os roteadores VPN Wireless-N Cisco RV110W, RV130W e RV215W. Devido à validação insuficiente de entrada na interface de...

CVE-2008-4654

CVE-2008-4654 Ein voll funktionsfähiger Exploit für die stackbasierte Pufferüberlauf-Schwachstelle CVE-2008-4654 im VLC Media Player 0.9.4 von VideoLan bei der Verarbeitung von TiVo-Dateien. Er zielt auf eine 32-Bit-Binärdatei ab, die unter einem 64-Bit-Windows-System läuft, und verwendet einen...

CVE-2026-75142

A flaw was found in FFmpeg. A stack buffer overflow exists in the MPEG-PS muxer. A local attacker or a user processing a specially crafted file with an excessive number of streams could trigger this flaw, leading to a buffer overflow. This could potentially result in denial of service or arbitrar...

CVE-2017-14980

Exploit-CVE-2017-14980 PoC exploit per CVE-2017-14980 — una vulnerabilità di stack-based buffer overflow in Sync Breeze Enterprise 10.0.28. 📖 Analisi tecnica completa dell'exploit: 👉 https://davigsantana.github.io/posts/buffer-overflow/ Informazioni Questo repository contiene un proof-of-concept...

katana

Katana Ein BootROM-Exploit für Qualcomm-Geräte, die zwischen 2016 und 2019 veröffentlicht wurden. Kurze Erklärung des Exploits Mit dem MSM8998 Nazgul-SoC wurde der Befehl 0x13 SAHARARESETSTATEMACHINEID hinzugefügt. Der Befehl ruft bootsaharaentry auf, das Sahara neu initialisieren soll. Der Fehle...

CVE-2026-78010

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

CVE-2026-19318

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-67560

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedomete...

CVE-2025-5548

Analisi e sfruttamento di FreeFloat FTP: CVE-2025-5548 Anderson Steven — Master in Cybersicurezza, Modulo 6 Vulnerabilità Consegna individuale: Metodologia di analisi e sfruttamento delle vulnerabilità Perché questo repository Non volevo semplicemente consegnare "ecco l'exploit funzionante". Ques...

CVE-2026-13086 Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint

A stack-based buffer overflow in the epm Endpoint Protection Manager service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code...

CVE-2026-78010 Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...